Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

anble to bypass pin #9443

Closed
alexparker70 opened this issue Mar 4, 2020 · 3 comments
Closed

anble to bypass pin #9443

alexparker70 opened this issue Mar 4, 2020 · 3 comments

Comments

@alexparker70
Copy link

alexparker70 commented Mar 4, 2020

ezgif com-video-to-gif(1)


Bug description

When I open the Signal App on LineageOS, I am presented with my pin unlock screen. However, if I just poke anywhere on the screen outside of that dialogue box, it completely bypasses the pin check procedure.

Steps to reproduce

  • open signal app
  • click outside dialogue box for entering pin
  • access messages
  • profit

Actual result: able to read/write messages without entering pin
Expected result: should not be able to read/write messages without entering pin

Screenshots

Device info

Device: Huawei Nexus 6P
Android version: 8.1.0
Signal version: 4.55.8

Link to debug log

@pgerber
Copy link
Contributor

pgerber commented Mar 4, 2020

This PIN is there so no one else can register with Signal using your phone number. See these support page. If you want to have the application locked, have a look at the Screen Lock support page.

BTW, at least in the beta version this screen has been redesigned and the intention should be clearer now; it's just there to help you memorize the pin:

signal-attachment-2020-03-04-124301

@Cerberus0
Copy link

I think this issue is a duplicate of #8699. In that thread, one of Signal's developers has said:

The "registration lock" pin is separate from the "lock screen" in. The registration lock doesn't block your day-to-day usage of Signal -- it's only meant to be required during registration to prevent someone else registering your same number. The pop-ups are simply reminders to help you remember you PIN.

The "lock screen" can be enabled independently in Settings > Privacy, and that will have the behavior I think you're looking for.

@alexparker70
Copy link
Author

thanks! I feel like an idiot but that explains it. :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

3 participants